A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with… (CVE-2026-73732)

This vulnerability affects the underlying operating system of HPE Networking Fabric Composer. An authenticated user with low privilege and local access can exploit this flaw to gain access to sensitive information. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information). The CVSS v3.1 base score is 5.6, reflecting a medium severity with local attack vector, high attack complexity, low privileges required, no user interaction, and confidentiality impact rated as high. There is no indication of integrity or availability impact. No known exploits are reported in the wild, and no patch or remediation information is provided.

Successful exploitation allows an authenticated low privilege local user to obtain sensitive information, which could be leveraged to gain further unauthorized access to the affected system and other systems it interacts with. There is no direct impact on system integrity or availability reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, limit local access to trusted users and monitor for suspicious activity consistent with attempts to access sensitive information.